Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33322d313238203d3e203238323133.roa
File:                     323830343a326537383a3a2f33322d313238203d3e203238323133.roa (raw, json)
Hash identifier:          FlpI9zCAdGI3SJkOzAZz6c6jIM8oaQTpndCEzZooGxE=
Subject key identifier:   C4:0A:BA:BE:4E:3C:8D:7F:5C:92:2F:3B:96:22:12:34:71:0E:AD:C4
Certificate issuer:       /CN=5EF817C4D35ABBC698DD971253BD6455131E483B
Certificate serial:       1A254F53A92277B34A077890F04F1ACE03AAD527
Authority key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33322d313238203d3e203238323133.roa
Signing time:             Mon 15 Jul 2024 14:55:51 +0000
ROA not before:           Mon 15 Jul 2024 14:50:51 +0000
ROA not after:            Mon 14 Jul 2025 14:55:51 +0000
asID:                     28213
IP address blocks:        2804:2e78::/32 maxlen: 128

Validation:               Failed, certificate revoked on Thu 18 Jul 2024 12:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:25:4f:53:a9:22:77:b3:4a:07:78:90:f0:4f:1a:ce:03:aa:d5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF817C4D35ABBC698DD971253BD6455131E483B
        Validity
            Not Before: Jul 15 14:50:51 2024 GMT
            Not After : Jul 14 14:55:51 2025 GMT
        Subject: CN=C40ABABE4E3C8D7F5C922F3B96221234710EADC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:da:d9:7a:44:90:b7:c7:97:75:71:4f:dc:9d:
                    04:10:d6:63:fc:ad:48:8d:3f:88:18:b3:c5:e0:f0:
                    29:2d:f0:f1:62:f3:2f:76:b5:9c:64:b2:6f:36:7a:
                    8a:59:e4:2b:2b:98:49:0d:88:c7:43:88:27:b9:94:
                    09:c1:55:ea:c5:08:ce:ce:f8:6c:d5:68:ae:66:42:
                    e8:bf:d0:93:18:66:f1:34:52:cd:9c:fe:76:2d:3a:
                    41:31:2c:54:79:f0:da:e1:0b:0c:e7:64:2a:bb:03:
                    dd:85:21:e3:45:b9:67:e7:4d:49:8b:eb:73:32:62:
                    20:0c:13:a0:37:97:40:ff:1a:d9:ed:af:07:95:c7:
                    b8:82:b0:52:21:38:99:d3:3b:42:10:ea:a8:ba:56:
                    3e:74:8c:de:12:31:fe:a4:68:8a:16:e6:d7:c9:42:
                    98:cf:cc:d4:44:f5:13:2e:fb:20:2a:3e:ba:11:8a:
                    10:1c:61:6a:d0:93:23:81:93:06:16:38:cf:f0:2e:
                    2d:60:79:23:17:07:a8:1f:8f:36:8a:de:a2:0e:03:
                    93:37:85:10:f5:7c:c8:20:a2:18:c8:07:d9:49:29:
                    a6:bd:46:64:2b:51:72:6d:b9:27:82:1c:e8:b0:32:
                    43:ca:af:bc:e0:ec:22:97:25:e7:6b:ac:f1:4f:4f:
                    08:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0A:BA:BE:4E:3C:8D:7F:5C:92:2F:3B:96:22:12:34:71:0E:AD:C4
            X509v3 Authority Key Identifier:
                keyid:5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33322d313238203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e78::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:3d:f5:2c:03:bb:a8:c2:f2:c7:a1:99:a4:e4:74:39:71:55:
         a0:c4:50:1e:41:3d:15:20:b6:1f:fe:33:02:2c:af:0b:69:92:
         1a:7a:da:a1:fd:a2:4d:92:59:37:b9:18:bd:31:62:be:58:6b:
         66:ec:5f:70:1e:b3:44:79:db:cb:ec:45:8a:51:f7:f5:30:89:
         eb:21:97:2d:4d:a9:80:a8:6f:d5:4c:e0:ad:d6:ef:ed:87:07:
         4d:26:79:9a:8f:32:18:10:8a:22:a0:c6:f1:3a:22:f3:2a:45:
         73:bf:a4:73:8e:bd:02:ff:80:6c:73:d6:88:09:ab:90:df:98:
         3a:71:80:2f:30:94:0d:2c:78:43:19:03:62:b9:51:31:cc:8a:
         9f:98:13:99:bf:69:b2:97:25:4a:9b:df:0d:64:10:67:da:56:
         26:84:67:59:42:91:c1:89:e6:06:1f:1a:50:f8:7e:62:2c:c3:
         ea:2f:a9:53:cb:39:b8:cf:98:3f:bc:b9:44:7b:1e:26:0d:28:
         5a:7c:8f:35:d5:ba:3f:2b:11:37:6a:6d:b6:ac:36:c5:07:04:
         9b:38:c8:fa:d9:63:30:a3:47:2d:82:00:36:92:cf:98:87:b6:
         1a:92:9c:08:e7:f5:d6:15:fa:a7:b7:92:eb:15:2e:39:95:98:
         b7:b8:28:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 16:37:40 2024 by rpki-client on console-fra.rpki-client.org